https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:47:32.859871+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-06004 cnvd-2018-06004 2026-10-04T16:47:32.889278+00:00 cnvd-2018-06004 https://cve.radiocsirt.org/vuln/euvd-2026-181648 EUVD-2026-181648 2026-10-04T16:47:32.889330+00:00 EUVD-2026-181648 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1323 fkie_cve-2018-1323 2026-10-04T16:47:32.889353+00:00

The IIS/ISAPI specific code in the Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 that normalised the requested path before matching it to the URI-worker map did not handle some edge cases correctly. If only a sub-set of the URLs supported by Tomcat were exposed via IIS, then it was possible for a specially constructed request to expose application functionality through the reverse proxy that was not intended for clients accessing Tomcat via the reverse proxy.

 https://cve.radiocsirt.org/vuln/ghsa-jxj8-3w7h-p8mx GHSA-jxj8-3w7h-p8mx 2026-10-04T16:47:32.889397+00:00

The IIS/ISAPI specific code in the Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 that normalised the requested path before matching it to the URI-worker map did not handle some edge cases correctly. If only a sub-set of the URLs supported by Tomcat were exposed via IIS, then it was possible for a specially constructed request to expose application functionality through the reverse proxy that was not intended for clients accessing Tomcat via the reverse proxy.

 https://cve.radiocsirt.org/vuln/gsd-2018-1323 gsd-2018-1323 2026-10-04T16:47:32.889424+00:00 gsd-2018-1323 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10625-1 openSUSE-SU-2024:10625-1 — apache2-mod_jk-1.2.48-2.9 on GA media 2026-10-04T16:47:32.889441+00:00

apache2-mod_jk-1.2.48-2.9 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2018:1843 RHSA-2018:1843 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 security update 2026-10-04T16:47:32.889470+00:00

isapi_redirect: Mishandled HTTP request paths in jk_isapi_plugin.c can lead to unintended exposure of application resources via the reverse proxy